Unlock hundreds more features
Save your Quiz to the Dashboard
View and Export Results
Use AI to Create Quizzes and Analyse Results

OR
Sign inSign in with Facebook
Sign inSign in with Google
Quizzes > Computers & Technology > Computers & IT

Do You Know Which Objects Group Policy Settings Apply To?

Ready to master GPO settings and Active Directory group policy? Take the quiz now and boost your skills!

Difficulty: Moderate
2-5mins
Learning OutcomesCheat Sheet
Paper art illustration of group policy objects quiz elements on sky blue background with quiz prompt

Are you ready to discover group policy settings apply to which of the following objects? Dive into our free GPO quiz and challenge your knowledge of GPO settings, Active Directory group policy, and the intricacies of Group Policy Objects. Whether you're an IT pro mastering Microsoft GPO best practices or a curious sysadmin, this test sharpens your expertise. In minutes, you'll verify which scopes - sites, domains, OUs, or local groups - receive specific policies and learn tips to streamline management. Plus, benchmark your score against peers and unlock deeper insights. Ready to level up? Explore our Active Directory Quiz and try a quick computer objective quiz . Start now and become a group policy guru!

On which Active Directory container can you directly link a Group Policy Object (GPO)?
Schema object
Organizational Unit (OU)
Domain Controller object
Global Catalog object
GPOs can be linked directly to OUs, domains, or sites. An OU is the most granular container you manage in Active Directory, making it a common target for policy application. Domain Controller, Global Catalog, and Schema objects are not valid link targets for GPOs. Microsoft Docs: Linking GPOs
The Local Group Policy Object (LGPO) applies settings to which scope?
The entire Active Directory domain
Only the Guest account
The local computer and all its users
Only the Administrator account
The Local GPO is stored on each computer and applies settings to that computer and any users who log on to it. It does not apply across the domain or to specific users only. Local GPOs provide a fallback when no domain-based GPOs are available. Local Group Policy
Which type of filter allows a GPO to target computers based on hardware or operating system properties?
Item-level targeting filter
Loopback processing filter
WMI filter
Security filter
WMI filters use WMI queries to check properties like OS version, CPU architecture, or installed RAM before applying a GPO. If the query returns true, the GPO is applied; otherwise it is skipped. Security filtering uses group membership, not hardware data. Using WMI Filters
Which Group Policy feature allows user settings to apply based on the computer's location rather than the user's OU?
Loopback processing
Security filtering
Delegation settings
WMI filtering
Loopback processing reroutes user policy processing to use the computer's GPO links instead of the user's own OU links. This is useful in kiosk or lab scenarios. It has two modes: Merge and Replace. Loopback Policy Processing
The Computer Configuration section of a GPO applies its settings to which accounts?
Organizational Units
Computer accounts
User accounts
Security groups
Computer Configuration settings are applied to computer objects at startup. They control machine-wide settings like scripts and security options. User Configuration settings apply to user objects at logon. GPUpdate Details
In the default Group Policy processing sequence at user logon, which GPO is processed first?
OU-linked GPO
Site-linked GPO
Domain-linked GPO
Local GPO
The processing order is Local ? Site ? Domain ? OU. The local GPO on the machine is applied first before any domain-based GPOs. This ensures that local policies can establish a baseline. GPO Processing Order
Which of the following Active Directory objects cannot have a GPO linked directly?
User object
Organizational Unit
Domain object
Site object
GPOs can only be linked to sites, domains, and OUs. They cannot be linked to individual user objects. To target a user, you link the GPO to the OU or domain containing that user. Where to Link GPOs
In the Group Policy Management Console (GPMC), which tab allows you to assign security filtering to a GPO?
Settings
Scope
Details
Delegation
The Scope tab in GPMC is used to configure Link, Security, and WMI filtering for a GPO. Security filtering limits which user or computer groups the GPO applies to. The Delegation tab is used for permissions on the GPO object itself. GPMC Tabs Overview
By default, GPO access is granted to Authenticated Users. Which filtering method uses group membership to control a GPO's application?
WMI filtering
Security group filtering
Loopback processing
Item-level targeting
Security group filtering leverages Active Directory group membership to allow or deny GPO application. You remove Authenticated Users and add specific groups on the Scope tab. WMI and item-level targeting are separate filtering methods. Security Filtering
Which tool provides a GUI wizard for backing up and restoring GPOs?
Local Security Policy
Active Directory Users and Computers
Registry Editor
Group Policy Management Console (GPMC)
GPMC includes a Backup and Restore GPO wizard under the Group Policy Objects container. It exports to a folder with XML report files. Other tools like ADUC, Regedit, and Local Security Policy cannot back up domain GPOs. Backing Up GPOs
What happens when you block inheritance on an OU in GPMC?
WMI filters are skipped
GPOs linked to parent containers are not applied to that OU
Local GPO is disabled
Child OUs lose all their links
Blocking inheritance on an OU prevents GPOs linked at higher levels (site or domain) from applying to that OU. It does not remove GPO links at child OUs or disable local policies. WMI filters associated with allowed GPOs still run. Block Inheritance
Where in a domain's SYSVOL folder is the Central Store for ADMX templates located?
Staging Areas
NTDS Quotas
Scripts
Policies\PolicyDefinitions
The Central Store is created under SYSVOL\domain\Policies\PolicyDefinitions. It holds ADMX/ADML files used by all domain controllers. Without it, each machine uses its local PolicyDefinitions folder. Central Store Location
WMI filters associated with a GPO are evaluated on which side during policy processing?
On the Group Policy Management Console
On the DNS server
On the client computer
On the domain controller
WMI filters run on the target client as part of the policy evaluation. The client queries its local WMI repository to determine filter results. Domain controllers do not evaluate these filters. WMI Filter Processing
Which PowerShell cmdlet can you use to back up a GPO?
Export-Gpo
Backup-Gpo
Copy-Gpo
Save-Gpo
Backup-Gpo is part of the GroupPolicy module and exports a GPO to a specified folder. You can also script restores with Restore-Gpo. Export-Gpo and Save-Gpo are not valid cmdlets out of the box. Backup-Gpo Cmdlet
What is the default order in which GPOs are processed at computer startup and user logon?
Site ? OU ? Domain ? Local
Local ? Site ? Domain ? OU
OU ? Domain ? Site ? Local
Domain ? Local ? OU ? Site
Group Policy processes Local, then Site-linked, then Domain-linked, then OU-linked GPOs. This order applies for both computer configuration at startup and user configuration at logon. It allows broad policies to be overridden by more specific ones. GPO Processing Sequence
Each GPO consists of two primary components: one stored in Active Directory and one in the file system. What are these components called?
GPC and GPT
ABS and XYZ
ADU and SYS
LDAP and NTFS
The Group Policy Container (GPC) is the AD object, while the Group Policy Template (GPT) is stored in SYSVOL on each domain controller. Together they define a single GPO. Changes in GPMC update both components. GPC and GPT Details
When multiple GPOs are linked to the same OU, which setting determines their application order?
Security filtering precedence
GPO creation date
GPO GUID value
Link order
Within a single OU, GPOs are applied in the link order shown in GPMC, from lowest to highest. You can adjust the order in the Scope tab. Security filtering does not affect the order, only who receives the GPO. Link Order
Which replication service is used by default to replicate the SYSVOL folder on Windows Server 2008 R2 and newer domain controllers?
DFS-R
File Replication Service (FRS)
Robocopy
BranchCache
DFSR (Distributed File System Replication) replaced FRS for SYSVOL replication starting in Windows Server 2008 R2. It offers improved performance and conflict resolution. FRS is deprecated and removed in newer versions. DFSR Overview
In loopback processing with the 'Replace' mode selected, which user policy settings are applied?
All user settings except local policies
Only settings from the local GPO
Only user settings from GPOs linked to the computer's site, domain, and OU
Both user and computer settings merged from all sources
Replace mode ignores GPOs linked to the user's OU and applies only those linked to the computer's site, domain, and OU. Merge mode combines both user and computer-linked GPOs. Replace is useful for locked-down kiosk environments. Loopback Replace Mode
If a WMI filter associated with a GPO evaluates to false on a target computer, what is the result?
Only computer settings are applied
The GPO applies default settings
Only user settings are applied
The GPO is not applied
When a WMI filter returns false, the entire GPO is skipped for that computer or user. No settings from that GPO are applied. If true, the GPO applies as normal. WMI Filter Results
What is the default slow link detection threshold in Kbps used by Group Policy to determine if a connection is slow?
500
100
250
1000
By default, Group Policy considers links slower than 500 Kbps as "slow" and may skip certain portions of policy processing, like scripts or folder redirection. You can change this threshold in the Group Policy Object under Computer Configuration. Configure slow link detection
Which Group Policy feature drastically speeds up computer startup and user logon by caching policy files locally on the client?
Group Policy Caching
WMI Filter Cache
BranchCache
Offline Files
Group Policy Caching stores the GPT (Group Policy Template) in a local cache on the client, reducing the need to download it from SYSVOL on every startup or logon. This feature was introduced in Windows 8.1/Server 2012 R2. It significantly improves performance on slow links. Group Policy Caching
0
{"name":"On which Active Directory container can you directly link a Group Policy Object (GPO)?", "url":"https://www.quiz-maker.com/QPREVIEW","txt":"On which Active Directory container can you directly link a Group Policy Object (GPO)?, The Local Group Policy Object (LGPO) applies settings to which scope?, Which type of filter allows a GPO to target computers based on hardware or operating system properties?","img":"https://www.quiz-maker.com/3012/images/ogquiz.png"}

Study Outcomes

  1. Determine GPO Object Scope -

    Identify which objects group policy settings apply to - sites, domains, organizational units, and local computers - within your Active Directory group policy environment.

  2. Analyze GPO Application Order -

    Understand the order in which Group Policy Objects are processed (Local, Site, Domain, OU) and how inheritance and enforcement affect final settings.

  3. Apply Security and WMI Filtering -

    Use security group filtering and WMI filters to target GPO settings to specific users, computers, or device attributes for precise policy deployment.

  4. Troubleshoot GPO Deployment -

    Leverage Group Policy Results and Modeling tools to diagnose and resolve issues in GPO settings application and ensure reliable policy enforcement.

  5. Evaluate Linking Best Practices -

    Assess Microsoft GPO best practices for linking Group Policy Objects to Active Directory containers to optimize performance and manageability.

  6. Optimize GPO Configuration -

    Apply advanced techniques and GPO settings to streamline policy management, improve security, and reduce administrative overhead across your network.

Cheat Sheet

  1. GPO Link Scope Choices -

    Group Policy Objects can be linked to three primary Active Directory containers: Sites, Domains, and Organizational Units (OUs). Remember the mnemonic "SDO" (Sites, Domains, OUs) to recall where group policy settings apply to which of the following objects. This framework comes straight from Microsoft Learn's official GPO documentation.

  2. User and Computer Account Targets -

    Group Policy settings only apply to user and computer objects within the linked scope, not to printers or network shares directly. Understanding that only "user" or "computer" object classes process GPOs helps avoid confusion when testing policies in a lab OU. This concept is detailed in Microsoft Docs under Active Directory group policy fundamentals.

  3. Security Filtering Techniques -

    Security filtering refines which AD security principals (users, computers, or groups) a GPO applies to by adjusting the ACL on the policy. For example, granting "Read & Apply Group Policy" only to the "Marketing Users" group ensures only those accounts receive the settings. Microsoft's GPO best practices guide on TechNet covers step-by-step filtering methods.

  4. Inheritance and Precedence Rules -

    GPOs inherit down the AD hierarchy, with Local → Site → Domain → OU (LSDOU) precedence determining which settings win in conflicts. You can Block Inheritance at an OU or Enforce a policy link to override lower-precedence blocks. These ordering rules are outlined by Microsoft in their official Active Directory group policy whitepapers.

  5. WMI Filtering for Granular Targeting -

    WMI filters allow GPO settings to apply only to computers meeting specific criteria, like matching Windows version or free disk space. For instance, a WMI query such as "Select * from Win32_OperatingSystem where Version >= '10.0'" ensures policies only hit Windows 10+ machines. This advanced filter capability is documented on Microsoft Learn under Group Policy WMI Filters.

Make a Quiz (FREE) Copy & Edit This Quiz Create a Quiz with AI

Computers & IT Quizzes

Powered by: Quiz Maker